CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC for one bug in CVE-2015-6620-1 ANDROIDID-24123723, AMessage unmarshal arbitrary write. The two bugs are merged to one CVE, and here is POC for one of them. Explaination 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt32; 535 sp msg = new...

cve-2014-7920-7921_update

cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...

EUVD-2017-0893

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-2417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a...

Linux Distros Unpatched Vulnerability : CVE-2016-3823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befor...

Linux Distros Unpatched Vulnerability : CVE-2016-2419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key- request data structure, which allows attackers to...

Linux Distros Unpatched Vulnerability : CVE-2016-3844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...

Linux Distros Unpatched Vulnerability : CVE-2017-0592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause...

Linux Distros Unpatched Vulnerability : CVE-2016-2460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which...

Linux Distros Unpatched Vulnerability : CVE-2016-3741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2016-3835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befor...

Linux Distros Unpatched Vulnerability : CVE-2016-2506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not valida...

Linux Distros Unpatched Vulnerability : CVE-2016-2486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not...

Qualcomm Libgralloc MediaServer Android CAF Data Compromise

The vulnerability of the dynamic library Qualcomm Libgralloc of the Android operating system’s MediaServer component, originating from the CAF repository, is related to a pointer offset that extends beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to...

Android Mediaserver Memory Corruption

The vulnerability of the Android operating system’s Mediaserver service arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code using a specially created file, which can cause memory corruption duri...

Android Mediaserver Memory Corruption

The vulnerability of the Android operating system’s Mediaserver service arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code using a specially created file, which can cause memory corruption duri...

Android Mediaserver Service DoS

The vulnerability of the Android operating system’s Mediaserver service is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive or restart through a specially created file or a service...

libhevc Memory Corruption

The vulnerability of the libhevc component of the Android operating system’s Mediaserver service arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using...

Mediaserver DoS

The vulnerability of the Mediaserver application in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots of the device using a specially created file...

libhevc DoS

The vulnerability of the libhevc library in the Mediaserver application of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...